Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-14984

Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mandiant

Description

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Teledyne FLIR Aware2

Default version status: unaffected

  • 0 to ≤ 6.9.0.2affected

References